CVE and update status of the FreeBSD ports tree3,310 unaddressed CVEs in 678 portsAll times are CET
Port details

multimedia/gstreamer1-plugins-x264 1.28.8

GStreamer libx264 based H264 plugin

Port info

Maintainer
multimedia@FreeBSD.org
Packages
latest: 1.28.8
Upstream
up to date
Last update
to 1.28.8 · 30a7e19ff0
Quarterly
2026Q4: 1.28.8 · last MFH d2b644208d
WWW
https://gstreamer.freedesktop.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install gstreamer1-plugins-x264
installs 1.28.8 from latest; from quarterly (2026Q4) 1.28.8
Port
# cd /usr/ports/multimedia/gstreamer1-plugins-x264 && make install clean
Size
34 KiB download · 92 KiB installed
Depends on
devel/gettext-runtime 1.0_1, devel/glib20 2.88.3,2, devel/orc 0.4.44, misc/iso-codes 4.20.1, multimedia/gstreamer1 1.28.8_1, multimedia/gstreamer1-plugins 1.28.8, multimedia/gstreamer1-plugins-ugly 1.28.8, multimedia/libx264 0.165.3223_1, print/freetype2 2.14.3, textproc/libxml2 2.15.4
License
LGPL20

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.28.81.28.8–
FreeBSD 151.28.81.28.8–
FreeBSD 141.28.81.28.6_11.28.8

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.28.81.28.8–
FreeBSD 141.28.81.28.81.28.8

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.28.8.

Fixed (7)

Show 7 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVECVSSPublishedDescription
CVE-2026-182957.82026-08-20GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst…
CVE-2026-182967.82026-08-20GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect…
CVE-2026-182977.82026-08-20GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec…
CVE-2026-182987.82026-08-20GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect…
CVE-2026-182997.82026-08-20GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations …
CVE-2026-734336.62026-08-12A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length …
CVE-2026-734346.12026-08-12A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculat…

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (30)

Jason E. Hale (jhale) · 1.28.8 MFH 2026Q4 ✓
GStreamer1: Update to 1.28.8

Changes: https://gstreamer.freedesktop.org/releases/1.28/#1.28.7
	 https://gstreamer.freedesktop.org/releases/1.28/#1.28.8

MFH:		2026Q4
Security:	bfa621d9-e508-4e3e-9a15-c2b54929ea77
30a7e19ff0
Daniel Engberg (diizzy) · 1.28.6_1
*/*: Bump consumers of multimedia/libx264

Reported by:	Kevin Oberman <rkoberman@gmail.com>
388f5973b7
Jason E. Hale (jhale)
multimedia/gstreamer1: Update to 1.24.8

Mk/Uses/gstreamer.mk:
- Sort, fix whitespace issues and typos
- Promote several common variables to improve maintainer QOL
*   There's now no need to set manually set PORTVERSION nor
    SOVERSION in several Makefiles
*   This will help to prevent not updating some components
*   A note has been added, however, to remind maintainers
    to remake distinfo for certain ports
- Improve documentation

multimedia/gstreamer1-plugins-webrtc:
- New port split from multimedia/gstreamer1-plugins-bad
- multimedia/gstreamer1-plugins-rust has been updated
  to reflect this change

net/gstreamer1-plugins-sctp:
- New port split from multimedia/gstreamer1-plugins-bad

x11-toolkits/gstreamer1-plugins-qt5:
- Moved here from graphics/gstreamer1-plugins-qt to
  align with its new Qt6 counterpart

x11-toolkits/gstreamer1-plugins-qt6:
- New port: GStreamer Qt6 QML videosink plugin

*/*:
- Improve Makefile order and formatting
- Sorry for the repo churn, but not fixing this would just lead to more
  poorly formatted gstreamer ports in the future via copypasta

https://gstreamer.freedesktop.org/releases/1.24/#1.24.8

PR:		278914
Reported by:	vvd
8c1efc578d
Thomas Zander (riggs)
Update gstreamer1 to upstream release 1.20.3

PR:		261585
Reviewed by:	riggs,jbeich,tcberner

Differential Revision:	https://reviews.freebsd.org/D36850
e3b732b479
Jan Beich (jbeich)
multimedia/x264: update to 0.164.3095

Changes:	https://code.videolan.org/videolan/x264/compare/5db6aa6...baee400f
8f87e3d181
Charlie Li (vishwin)
textproc/libxml2: bump all LIB_DEPENDS consumers

This is a separate commit to facilitate easier cherry-picking for
quarterly.

PR: 262853, 262940, 262877, 263126
Approved by: fluffy (mentor)
d63665f7cd
Matthias Fechner (mfechner)
textproc/libxml2: bump all dependencies

This should make sure that all dependent ports will pick
up the new version commited with a13ec21cd733f67a9fc0dc00ab45268bdc236246
247c7db751
Jan Beich (jbeich)
multimedia/x264: update to 0.163.3060

Changes:	https://code.videolan.org/videolan/x264/compare/55d517b...5db6aa6
d6e84975f0
Mathieu Arnold (mat)
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat)
Remove # $FreeBSD$ from Makefiles.
305f148f48
Jan Beich (jbeich)
multimedia/x264: update to 0.161.3020

Changes:	https://code.videolan.org/videolan/x264/compare/cde9a93...d198931
ABI:		https://abi-laboratory.pro/tracker/timeline/x264/
1eee34b954
Jan Beich (jbeich)
multimedia/x264: update to 0.160.3011

Changes:	https://code.videolan.org/videolan/x264/compare/296494a4...cde9a93
ABI:		https://abi-laboratory.pro/tracker/timeline/x264/
a7d983f039
Koop Mast (kwm)
Update gstreamer1 to 1.16.2.

- The spc plugin was removed inflavor for the gsm plugin.
- Added in tree qt plugin.

Changelog: https://gstreamer.freedesktop.org/releases/1.16/#1.16.2

Update net-im/fractal to 4.2.2 to support GStreamer 1.16 (approved by maintainer)

Thanks to antoine@ for the exp-run.

PR:		239386
aa49f23a6d
Jan Beich (jbeich)
multimedia/x264: update to 0.157.2945

Changes:	https://git.videolan.org/?p=x264.git;a=shortlog;h=72db437770fd1ce3961f624dd57a8e75ff65ae0b
ABI:		https://abi-laboratory.pro/tracker/timeline/x264/
4f594e8803
Jan Beich (jbeich)
multimedia/x264: update to 0.155.2917

- HI10P is always built after https://git.videolan.org/?p=x264.git;a=commitdiff;h=71ed44c73124

Changes:	https://git.videolan.org/?p=x264.git;a=shortlog;h=0a84d986e7020f8344f00752e3600b9769cc1e85
ABI:		https://abi-laboratory.pro/tracker/timeline/x264/
d6bccda8d9
Jan Beich (jbeich)
multimedia/{lib,}x264: update to 0.152.2854

Changes:	https://git.videolan.org/?p=x264.git;a=shortlog;h=e9a5903edf8ca59ef20e6f4894c196f135af735e
32ea2cb7fc
Koop Mast (kwm)
Update GStreamer1 ports to 1.12.2.

Rework the adding of dependancies in Mk/bsd.gstreamer.mk.
Previous when using USE_GSTREAMER[1] it would just add the request modules to BUILD/RUN_DEPENDS. This caused the qa script to complain because the old code didn't implicit depend on the gstreamer1 and gstreamer1-plugins[-bad] ports for the libraries they carried, even if they where present via the plugins! The new code adds implicit depends on these ports so USE_GSTREAMER[1] using ports have all the libraries included.

* The mad mp3 plugin was removed, mpg123 plugin also provides mp3 decoding. Switch over ports that used the gstreamer1 mad plugin.
* gtksink plugin renamed -> gtk
* Hook up the sndio plugin into the framework
* Add some indirect dependacies where needed
* Reorder the plugin list in bsd.gstreamer.mk so only one plugin per line. When changing plugins it doesn't result in multiple lines being changed.
* Remove mentions in bsd.gstreamer.mk of plugins mentions that where removed.
* Depend on libunwind on i386/amd64, GStreamer links to it if it is present.

PR:		220753
Exp-run by:	antoine@
d566d54fa6
Jan Beich (jbeich)
multimedia/x264: update to 0.148.2708

Changes:	https://git.videolan.org/?p=x264.git;a=shortlog;h=86b71982e131eaa70125f8d0e725fcade9c4c677
Differential Revision:	https://reviews.freebsd.org/D7958
Approved by:	koobs (maintainer)
4d4012b533
Koop Mast (kwm)
Update GStreamer1 to 1.6.2. Update GStreamer1-vaapi to 0.7.0.

* Spell GStreamer consistently. [1]
* Fix typo in py3kplist in py3-gstreamer1 [1]
* Improve plugins COMMENTS (more improvements welcome)
* Actually include the gstreamer1-libav update this time.

PR:		204204 [1] (based on)
Submitted by:	olivierd@ [1]
353ad9c72e
Koop Mast (kwm)
Update gstreamer1 ports to 1.6.0.

* gstreamer1-libav now uses ffmpeg from ports.
* New ports:
  * gstreamer1-validate: Tools to detect if elements are not behaving
    as expected, mainly aimed at developers, or advanced debugging.
  * gstreamer1-rtsp-server: Base foundation for building a rtsp
    server ontop of GStreamer
 * Bunch of new plugins like: mpg123, rsvg, libde265, openh264, x265 and dtls.

Release announcement:
  http://lists.freedesktop.org/archives/gstreamer-announce/2015-September/000357.html

Obtained from:	gnome devel repo
7b97259096
Kubilay Kocak (koobs)
multimedia/{lib}x264: Update to 0.144.2533 and major refactor

- Update to 0.144.2533 (from upstream stable branch) [1]
- Switch x264 and libx264 ports to master/slave ports respectively
- Bump PORTREVISION for dependent ports as the shared library version
  has changed.

multimedia/x264:

- Clean up and update "updating instructions" in Makefile header
- Tweak COMMENT
- Only LIB_DEPENDS on libx264 and add PLIST_FILES if this isn't the
  libx264 port.
- Allow COMMENT, USES, OPTIONS_*, CONFIGURE_ARGS to be overriden in
  libx264 port.
- Place common configure arguments in a CONFIGURE_COMMON_ARGS variable
  to make overriding values without duplication easier.
- Use --prefix configure argument over post-patch replacements
- Enable stripping of binaries and libraries if DEBUG is off. Remove
  post-install target STRIP_CMD accordingly.

- Delete patch-Makefile in favour of patching WRKSRC/configure to
  identify amd64, arm64 and mipsn32. powerpc and powerpc64 are now
  covered upstream without needing patches.

- Patch out a bogus compiler argument check (cc_check) that results
  in -Wno-maybe-uninitialized being added to CFLAGS causing causes
  warnings when clang is cc. The cc_check function checks for basename
  $CC to identify compiler type (icl, clang, gcc, etc).

multimedia/libx264:

- Remove all Makefile entries that are duplicated or common and found
  in the master port (x264).
- Set lib as the PKGNAMEPREFIX
- Tweak COMMENT
- Delete upstreamed ARM patches [1]
- Delete all but one patch, as they duplicate those in x264.
- Dont remove pkgconfig/libdata directory

Changes:

  https://git.videolan.org/?p=x264.git;a=shortlog;h=refs/heads/stable

Based on:

PR:		201260 [1]
Submitted by:	Andrey Cherkashin <andoriyu gmail com> [1]
9b08af5e1a
Koop Mast (kwm)
Big Gstreamer update:

Update gstreamer, gstreamer-plugins, -good, -bad and -ugly ports to 1.4.4.
Update gstreamer1-plugins-gnonlin to 1.4.0.
Update py-gstreamer1 and py3-gstreamer1 to 1.4.0.

Add multimedia/gstreamer1-editing-services. GES is a high-level library
for facilitating the creation of audio/video non-linear editors.

Add pulseaudio plugin now that pulseaudio is updated and add the gl plugin.

Drop :keepla from USES=libtool.
Drop @dirrm[try] from plists and drop gnomehier from USE_GNOME
Switch to optionhelpers in multimedia/gstreamer1.

PR:		194922 (merged with my own WIP)
Submitted by:	olivierd
c6e9859c13
Johannes Jost Meixner (xmj)
multimedia/x264: General overhaul

- Split x264 into two ports: the CLI application (x264), and the library
  (libx264). This will allow x264 to use lavf and friends from ffmpeg for
  decoding and demuxing while preventing a circular dependency between the
  two: x264 can depend on ffmpeg, but ffmpeg will depend on libx264 rather
  than x264.
- Add the LAVF option to the CLI port, making the dependency on ffmpeg
  optional.
- Update to 0.142.2455.
- Amend fixes to local patches so that they can apply to the new upstream
  files.
- Provide the git revision and other version information to the build
  environment, allowing the CLI binary to display this information (like the
  Windows builds).
- Remove unsupported build options (X11_OUTPUT).
- Ensure that the library and CLI ports each have the appropriate options.
- Add notes for future contributors who wish to update the ports.
- Bump PORTREVISION for all dependent ports.

PR:           187805
Differential Revision:	https://reviews.freebsd.org/D1159
Submitted by: Andrew Berg <aberg010@my.hennepintech.edu>
Approved by:  koobs (maintainer, mentor)
4f12f3b178
Tijl Coosemans (tijl)
Update gstreamer 1.0 ports to version 1.2.4.
ce5a9a5d44
Tijl Coosemans (tijl)
When linking a library libA with a library libB using libtool, if libB.la exists, libtool will add all libraries libB.la refers to (dependency_libs field) to the linker command line and store them in the dependency_libs field of libA.la.  So everything that subsequently links with libA will also link to these extra libraries.  This causes too much overlinking.

This commit modifies Mk/Uses/libtool.mk so it empties the dependency_libs
field in .la libraries during staging.  However, because .la libraries have
very limited use when dependency_libs is empty it makes sense to completely
remove them during staging.

So with this commit USES=libtool is modified to remove .la libraries and a
new form (USES=libtool:keepla) is introduced in case they need to be kept
(dependency_libs is still emptied).

PORTREVISION is bumped on all ports with USES=libtool that install .la
libraries.  Most ports are also changed to add :keepla because .la
libraries have to be kept around as long as there are dependent ports with
.la libraries that refer to them in their dependency_libs field.  In most
cases :keepla can be removed again as soon as all dependent ports that
install .la libraries have some form of USES=libtool added to their
Makefile.

PR:		ports/188759
Exp-run:	bdrewery
Approved by:	portmgr (bdrewery)
aad09bc5e2
Koop Mast (kwm)
Update to 1.2.2.

Remove vaapi from plugin list in bsd.gstreamer.mk it accidently snuck in.

Changelog: http://lists.freedesktop.org/archives/gstreamer-devel/2013-December/045238.html
2dba4b6fda
Koop Mast (kwm)
Stagify Gstreamer ports. Fix build of gstreamer and gstreamer1 with glib 2.38.x [1]. Update gstreamer and gstreamer-plugins to new rules, USES=gmake pathfix, new LIB_DEPENDS syntax. Only pull in flex if base version is too old. Be more selective for which OSVERSIONS we need gcc due to the clang bug.

Obtained from:	Gstreamer upstream [1]
44d0dc12bb
Kubilay Kocak (koobs)
multimedia/x264: Update to 20130827 snapshot

- Update to 20130827 snapshot
- Add CONFIGURE_ARGS to disable OpenCL, fixes configure failure
- Chase library version bump in dependent ports

PR:		ports/182484
Submitted by:	mm
Reviewed by:	kwm, bapt
51bfa6a800
Baptiste Daroussin (bapt)
Add NO_STAGE all over the place in preparation for the staging support (cat: multimedia)
855fb638fb
Koop Mast (kwm)
Add Gstreamer 1.0.7. This is the new stable version of the Gstreamer multimedia framework.

Use the USE_GSTREAMER1 macro to select Gstreamer 1.0 plugins. A new chapter
for the porters handbook about gstreamer is a work in progress.

X related plugins are now stand alone. The gio plugin is now part of the
gstreamer1-plugins port and the oss plugins are now part of the
gstreamer1-plugins-good port.

Note that the pulseaudio plugin is missing because it needs a newer version
of pulseaudio. Also there are still a number of plugins from -bad which
haven't been ported to the 1.0 API yet.
05d2886d27